I think the higher ups are way off base.  We just completed our S-O audit and we basically have to have an audit of who logged in and documentation of any changes to the databases of any of our financially significant applications.  The auditors realize that the DBA still must be able to do their job.  I would suggest that they have a sit down with the auditors because they are way off base.